Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/594cdc2b-50f6-3b7f-99ce-cf549ed9f78f.roa
File:                     594cdc2b-50f6-3b7f-99ce-cf549ed9f78f.roa (raw, json)
Hash identifier:          xh/ESSqMGcbTwGy+BcdbJUdyaJ3Vcx3BBc2g1GyeRWg=
Subject key identifier:   BD:38:8B:D7:72:AF:09:0A:E1:0C:B9:B0:F7:12:3B:E1:51:F4:4C:DC
Certificate issuer:       /CN=38c5255f-5193-4ef7-92e9-db326ee1d690
Certificate serial:       010D0C9F43285848828097BA67B2672D8F55CC22
Authority key identifier: E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/594cdc2b-50f6-3b7f-99ce-cf549ed9f78f.roa
Signing time:             Sat 11 Jan 2025 14:00:52 +0000
ROA not before:           Sat 11 Jan 2025 14:00:52 +0000
ROA not after:            Fri 11 Apr 2025 13:00:52 +0000
asID:                     6498
IP address blocks:        75.78.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:82:80:97:ba:67:b2:67:2d:8f:55:cc:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38c5255f-5193-4ef7-92e9-db326ee1d690
        Validity
            Not Before: Jan 11 14:00:52 2025 GMT
            Not After : Apr 11 13:00:52 2025 GMT
        Subject: CN=e2b0ec4f-db38-4eca-b056-9af94af65c1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ae:7f:50:f2:ac:02:71:28:f0:dd:66:90:c5:
                    10:64:45:80:3f:66:c7:c2:72:e6:28:77:bf:4e:43:
                    52:53:cf:5c:37:bd:c0:2e:33:02:73:a4:ad:68:a4:
                    bb:af:16:fc:3f:33:05:f4:b5:d0:60:71:88:57:4a:
                    25:4f:71:26:51:88:bb:00:be:51:15:2e:a1:08:ea:
                    37:f1:a2:93:87:cc:ac:17:d3:a4:ff:67:bc:d5:fb:
                    d8:a2:ec:4f:bf:41:96:f5:89:ba:75:5c:07:67:87:
                    be:58:b9:8b:5f:92:2c:a2:35:94:17:0c:2d:e3:6f:
                    14:a6:67:0c:ac:7a:f2:4b:e1:7e:ee:f6:5e:24:52:
                    9d:8d:15:6d:e6:e3:bd:19:d1:05:69:e3:b0:e5:72:
                    de:e3:a5:f1:c0:15:3a:9e:c2:79:bf:3e:2e:fc:70:
                    82:02:a8:e5:d7:8a:d6:09:be:e5:64:d5:ae:e8:7c:
                    9e:0d:d5:d4:7f:c8:a4:cb:7d:17:75:d2:b9:cb:2a:
                    ee:97:68:53:d4:4d:a2:a0:5c:8e:8d:b8:d4:e6:4c:
                    82:38:cc:4f:72:36:aa:96:f9:46:c2:96:00:66:0b:
                    ac:e2:72:12:80:28:83:a5:40:14:20:3c:bf:c3:85:
                    55:ba:3f:9b:8a:44:f7:05:11:90:39:87:07:e0:22:
                    c5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:38:8B:D7:72:AF:09:0A:E1:0C:B9:B0:F7:12:3B:E1:51:F4:4C:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/594cdc2b-50f6-3b7f-99ce-cf549ed9f78f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690/38c5255f-5193-4ef7-92e9-db326ee1d690.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EB:51:76:DE:0B:D9:56:08:5F:63:4E:0F:48:07:9F:2E:90:9D:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/38c5255f-5193-4ef7-92e9-db326ee1d690.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.78.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:94:5f:55:1b:c6:47:9a:f4:cc:6d:0f:af:f5:f9:19:89:ff:
         db:5d:db:dd:c0:6e:85:f1:44:0e:44:df:15:f1:18:f7:19:80:
         1f:a1:54:a7:60:0d:d0:ef:92:e1:83:67:22:f6:47:cd:c9:aa:
         53:78:47:9d:6f:8f:79:e8:16:9e:f0:1a:34:e7:b6:59:aa:92:
         8a:3a:4d:a9:4e:87:29:a9:5b:bc:92:e0:11:5c:de:fe:af:83:
         2b:f9:3f:35:7f:fe:99:4b:68:30:c4:65:49:f6:e0:b8:44:aa:
         6f:e8:55:0b:d6:3e:89:0b:04:18:e4:5d:83:70:62:c9:c6:f8:
         0b:6c:a5:cf:57:5e:93:56:18:7f:f7:e2:77:97:f0:6c:2b:e0:
         60:4a:c9:5d:25:15:1f:ad:a2:35:e5:cc:43:bd:c4:96:e4:a1:
         a5:51:60:80:e6:46:d9:03:78:a9:ae:45:b3:a9:74:70:57:40:
         75:d9:b7:6a:a4:d2:97:6b:a3:04:cc:22:d1:66:2f:7a:49:16:
         92:92:5c:7d:44:05:82:2b:1c:75:5e:cc:49:d9:d2:59:66:64:
         7b:a0:d6:69:fb:af:01:4a:e8:8e:cd:16:f4:7e:67:14:0d:64:
         e8:2b:6a:90:39:ba:e5:62:aa:fa:de:ed:55:bd:75:f1:cf:4a:
         c2:7b:26:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:53 2025 by rpki-client